CVE-2012-1965: Improper Neutralization of Input During Web Page Generation

Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do not properly establish the security context of a feed: URL, which allows remote attackers to bypass unspecified cross-site scripting XSS protection mechanisms via a feed:javascript: URL...

PT-2012-3695

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 13.0 Mozilla Firefox ESR versions 10.x before 10.0.6 Description The issue allows remote attackers to bypass cross-site scripting XSS protection mechanisms. This is achieved via a feed:javascript: URL, whic...